CVE-2016-2210
Description
Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0.5 HF 1.5 and 6.0.6 before HF 1.6; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 7.0_3966002 HF1.1 and 7.5.x before 7.5_3966008 VHF1.2; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF1.1 and 8.1.x before 8.1.3 HF1.2; CSAPI before 10.0.4 HF01; Symantec Message Gateway (SMG) before 10.6.1-4; Symantec Message Gateway for Service Providers (SMG-SP) 10.5 before patch 254 and 10.6 before patch 253; Norton AntiVirus, Norton Security, Norton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code via a crafted file.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec mail_security_for_microsoft_exchange | 7.0 ≤ v ≤ 7.0.4, 7.5 ≤ v ≤ 7.5.4, 6.5.8 | — |
| symantec norton_power_eraser | v ≤ 5.0 | — |
| symantec protection_engine | 7.0.0 ≤ v ≤ 7.0.5, 7.5.0 ≤ v ≤ 7.5.4, 7.8.0 | — |
| symantec endpoint_protection | 12.1.6 | — |
| symantec message_gateway | v ≤ 10.6.1-3 | — |
| symantec norton_360 | No range specified | — |
| symantec norton_antivirus | No range specified | — |
| symantec norton_internet_security | No range specified | — |
| symantec norton_security | No range specified, v ≤ 13.0.1 | — |
| symantec norton_security_with_backup | No range specified | — |
| symantec ngc | v ≤ 22.6 | — |
| symantec message_gateway_for_service_providers | 10.5, 10.6 | — |
| symantec norton_bootable_removal_tool | v ≤ 2016.0 | — |
| symantec mail_security_for_domino | 8.0 ≤ v ≤ 8.0.9, 8.1 ≤ v ≤ 8.1.3 | — |
| symantec data_center_security_server | 6.0, 6.5, 6.6 | — |
| symantec advanced_threat_protection | v ≤ 2.0.3 | — |
| symantec protection_for_sharepoint_servers | 6.03, 6.04, 6.05, 6.06 | — |
| symantec csapi | v ≤ 10.0.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.